Open-source alternatives to Splunk
3 open-source projects are offered as replacements for Splunk. Quickwit is the most starred. Running one yourself trades the subscription for your own hosting and upkeep, so the table below leads with what decides that trade: whether the project is alive, what its licence lets a business do, and whether there is a container command to start from.
Side by side
Each one, briefly
Quickwit11,725 stars · permissive · activeCloud-native OSS search engine for observability
Also replaces Elasticsearch

Matano1,700 stars · permissive · quietOpen source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Also replaces Elasticsearch, Panther
Where this comes from
Which projects are offered against Splunk comes from opensourcealternative.to, re-read weekly. Every figure in the table is read from the project’s own repository. We have not run these projects, and we hold no price for Splunk. Browse every open-source alternative.